npmamzs

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (25a8c88c6c60c588983806906169ffad0a2a863d45482ac8e2740f320f7cb2ea)
The package npmamzs was found to contain malicious code.

## Source: ossf-package-analysis (d494475ee013b73bb0df9b1f0533b2f169fb6feff4b7c3c282c3629588be4e2d)
The OpenSSF Package Analysis project identified 'npmamzs' @ 1.1.4 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

- The package executes one or more commands associated with malicious behavior.

Compromised versions (5)

• 1.1.1
• 1.1.0
• 1.1.2
• 1.1.3
• 1.1.4

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.